Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories

Friday, June 26, 2026 at 03:23 PM UTC·Source: SecurityWeek

Updated: Friday, June 26, 2026 at 04:00 PM UTC

Executive Summary

AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact. The post Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories appeared first on SecurityWeek .

Analysis

Source Attribution

Originally published by SecurityWeek on Jun 26, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Launch of UK's National Cyber Action Plan delayed amid Labour leadership crisis

The plan had been due for publication on Monday, the sources said. It has been postponed amid the uncertainty over the governing Labour Party’s leadership contest, which opens July 9.

33m agoThe Record

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-59099 — Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that al...

Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM initialization vector reuse across the server lifetime. Attackers can collect multiple client-side webflow execution tokens from the unauthenticated login page and perform known-plaintext analysis to decrypt the webflow

CVE-2026-59099

48m agoNIST NVD

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-58466 — AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability...

AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to authenticate as the administrator by using the publicly known default credentials seeded at startup via add_default_user() in the database user module when the users table is empty. Attackers can submit the default credentials to the authentication login endpoint to gain full c

CVE-2026-58466

48m agoNIST NVD